AWS AmazonCloudFront documentation change
Summary
Added support for dualstack IPv4/IPv6 Anycast static IP lists, removed IPv6 disablement requirement, added update functionality for IP address types, and clarified compatibility between IP lists and distribution settings
Security assessment
The changes primarily expand functionality to support IPv6 and dualstack configurations rather than addressing security vulnerabilities. While IPv6 adoption can have security implications, there's no evidence this change responds to a specific security issue. The documentation now better explains compatibility requirements between IP types and distributions, but this is operational guidance rather than security-focused content.
Diff
diff --git a/AmazonCloudFront/latest/DeveloperGuide/request-static-ips.md b/AmazonCloudFront/latest/DeveloperGuide/request-static-ips.md index d5dd0e652..8787a7d4f 100644 --- a//AmazonCloudFront/latest/DeveloperGuide/request-static-ips.md +++ b//AmazonCloudFront/latest/DeveloperGuide/request-static-ips.md @@ -5 +5 @@ -PrerequisitesRequest an Anycast static IP listCreate an Anycast static IP listAssociate an Anycast static IP list with an existing distributionAssociate an Anycast static IP list with a new distribution +PrerequisitesRequest an Anycast static IP listCreate an Anycast static IP listAssociate an Anycast static IP list with an existing distributionAssociate an Anycast static IP list with a new distributionUpdate an Anycast static IP list @@ -9 +9 @@ PrerequisitesRequest an Anycast static IP listCreate an Anycast static IP listAs -You can request Anycast static IPs from CloudFront to use with your distributions. Anycast static IP lists contain IPv4 IP addresses that are dedicated to your AWS account and spread across geographic regions. +You can request Anycast static IPs from CloudFront to use with your distributions. Anycast static IP lists can contain only IPv4 IP addresses or both IPv4 and IPv6 IP addresses. These IP addresses are dedicated to your AWS account and spread across geographic regions. @@ -19,8 +19 @@ Anycast static IPs work with [Server Name Indication (SNI)](https://en.wikipedia -To use Anycast static IP lists with your CloudFront distribution, you must: - - * Turn off IPv6 for the distribution that you want to use with your Anycast static IP list. - - * Select **Use all edge locations** for the price class for the distribution. For more information about pricing, see [CloudFront pricing](https://aws.amazon.com/cloudfront/pricing/). - - - +To use Anycast static IP lists with your CloudFront distribution, you must select **Use all edge locations** for the price class for the distribution. For more information about pricing, see [CloudFront pricing](https://aws.amazon.com/cloudfront/pricing/). @@ -65 +58,7 @@ Before you begin, request an Anycast static IP list as explained in the precedin - 6. Review the service terms and pricing, and choose **Submit**. + 6. For **IP address type** , specify one of the following options: + + * **IPv4** – Allocate a list of only IPv4 addresses + + * **Dualstack** – Allocate a list of both IPv4 and IPv6 addresses + + 7. Review the service terms and pricing, and choose **Submit**. @@ -74 +73,10 @@ After your static IP list is created, you can view the allocated IP addresses on -Before you begin, request and create an Anycast static IP list as explained in the preceding sections. Also confirm that you have turned off IPv6 for your distribution and selected **Use all edge locations (best performance)** for the price class. +Before you begin, request and create an Anycast static IP list as explained in the preceding sections. + +Verify that the following distribution settings are compatible with your Anycast static IP list: + + * [Price class](./DownloadDistValuesGeneral.html#DownloadDistValuesPriceClass) has the **Use all edge locations (best performance)** setting. + + * If [IPv6](./cloudfront-enable-ipv6.html) is enabled, you can associate a dualstack Anycast static IP list. An Anycast static IP list that only has IPv4 addresses can't be associated to distributions with IPv6 enabled. + + + @@ -121 +129 @@ Before you begin, request and create an Anycast static IP list as explained in t - * For **IPv6** , select **Off**. + * **Note:** If your Anycast static IP is only using IPv4 and not dualstack, for **IPv6** , select **Off**. @@ -129,0 +138,29 @@ For more information about quotas related to Anycast static IP lists, see [Amazo +## Update an Anycast static IP list + +After you have created your Anycast static IP address and associated it to a distribution, you can change the IP address type of your Anycast static IP list.. + +###### To update an Anycast static IP list + + 1. Sign in to the AWS Management Console and open the CloudFront console at [https://console.aws.amazon.com/cloudfront/v4/home](https://console.aws.amazon.com/cloudfront/v4/home). + + 2. In the left navigation pane, choose **Static IPs**. + + 3. Choose the name of your static IP list. + + 4. Choose **Edit**. + + 5. For **IP address type** , specify one of the following options: + + * **IPv4** – Allocate a list of only IPv4 addresses + + * **Dualstack** – Allocate a list of both IPv4 and IPv6 addresses + +###### Note + +You can't choose **IPv4** if your associated distribution has already enabled IPv6. To do so, disable IPv6 before you can update the IP address type for your Anycast static IP. For more information, see [Enable IPv6 for CloudFront distributions](./cloudfront-enable-ipv6.html). + + 6. Choose **Submit** to save your changes and update the Anycast static IP list. + + + +